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The Snowden Files: British Spies Used Sex and 'Dirty Tricks' 
Slideshow No. 2 

These slides, from a top-secret spy conference in 2010, were 
prepared by GCHQ, the British signals intelligence agency, 
describing cyber operations and proposals for operations. The 
slides focus on the efforts of a unit, the Joint Intelligence 
Research Group, or JTRIG, and include a proposal to use foreign 
journalists for intelligence operations. 

The slides were leaked by former NSA contractor Edward 
Snowden and obtained exclusively by NBC News, which is 
publishing them with minimal redactions. 
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Full-Spectrum Cyber Effects 




SIGINT Development as an enabler 
for GCHQ's “Effects” mission 
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Effects 

Destroy | Deny | Degrade | Disrupt | Deceive j Protect 



Computer Network Attack (CNA) 

Computer Network Information Operations (CN10) 
Disruption 
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• Definition: having an impact in the real world 

• Key deliverers: JTRIG and ONE 

• Now major part of business - 5% of Operations 

• Across all target types 

• Continuous innovation of new tools and techniques 
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CNIO 

Computer Network Information Operations 



• Propaganda 

• Deception 

• Mass messaging 

• Pushing stories 

• Alias development 

• Psychology 





facebook 
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Disruption / CNA 

• Masquerades 

• Spoofing 

• Denial of service 

- Phones 

- Emails 

- Computers 

- Faxes 
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Critical 



Maritime 

Cyber 




Country wide 
High impact 



Internet 

Routing 
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Information Operations 

INFINITE CURVATURE/MOUNTAIN SLOPE 

Sending messages across the full spectrum of communications 



Telephony SMS FAX Email 







RADIUS Data 


SALAMANCA 
Data Mining 
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ROYAL CONCIERGE 

A SIGINT driven hotel reservation tip-off service 



From: reaervations^xpensivehotet.ecsm 
To: neW'largetlfmod.gDV. x x 

“Thank you for reserving r ..^ w 



ROYAL CONCIERGE exploits these 
messages and sends out daily alerts to 
analysts working on governmental 
hard targets 

What hotel are they visiting? 

Is it SIGIHT friendly? 




An enabler for effects - can we influence the hotel choice? Can we cancel their visit? 



We can use this as an enabler for HUMINT and Close Access Technical Operations 
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Mobile Information Ops 
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50 new mobile TDIs being 
Developed by end of 2010 

Also * Target Geographical 
Identifiers (TGI) 



We can shape CNIO against 
specific locations, users with 
a high degree of cognition 
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Human Systems Analysis 



Foreign News Agencies: 

* Credential Harvesting 

* Employee Analysis 
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Future? 



Formalising Tradecraft for Analysts: 

“What SIGDEV needs to be 
done prior to starting an 
Effects operation?" 




Joining up with 5 EYES where possible (cyber development) 




SIP and VoIP Effects - Denial of Service, Psychological Operations 



Provide the defensive advice from the offensive perspective 
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